Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
File: XfJyIcGPyv50iSvA6Xv17nw0T6c.mft (raw, json)
Hash identifier: ZdK5jkpxbYgu4ZoNX76UWfh3MGUliVusR6VpYfmBm4I=
Subject key identifier: F9:36:8E:29:C5:B7:71:50:1F:EB:0D:06:91:8C:4A:CE:41:39:29:C9
Authority key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
Certificate issuer: /CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Certificate serial: 0197B6D79439CC8C48C482407A1C77BA8957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
Manifest number: 0BA0
Signing time: Sat 28 Jun 2025 14:01:10 +0000
Manifest this update: Sat 28 Jun 2025 14:01:10 +0000
Manifest next update: Sun 29 Jun 2025 14:01:10 +0000
Files and hashes: 1: D5MLLXN4CceB_y0IsVIPz32Ea_c.roa (hash: C5Fky/sLD5/418lsfJMNs8+3fuwIak8zmx88JyIH2s8=)
2: XfJyIcGPyv50iSvA6Xv17nw0T6c.crl (hash: SAk7UsPcb60wEU82Eep0xEPpZRO89x2sst4wBkYjRM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:94:39:cc:8c:48:c4:82:40:7a:1c:77:ba:89:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Validity
Not Before: Jun 28 14:01:10 2025 GMT
Not After : Jun 29 14:01:10 2025 GMT
Subject: CN=f9368e29c5b771501feb0d06918c4ace413929c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:69:ad:18:b8:66:98:b9:5c:e5:88:ae:e3:
1f:25:25:a3:2e:4b:c2:a1:d4:e8:c9:c6:65:8b:e2:
9a:27:37:6d:e9:b9:15:e7:03:33:31:af:ab:14:b8:
eb:b1:6c:29:61:54:da:65:15:b4:7f:72:43:e3:f7:
e7:63:9d:21:de:51:f2:8e:9e:3b:d3:5b:76:d1:ff:
98:7f:ee:b0:a6:74:6a:0e:4e:28:55:43:d3:d0:2f:
50:14:4e:e5:96:32:7d:44:6e:7d:0f:c3:cd:2f:54:
98:9c:5f:36:9e:53:16:af:a6:71:9f:d4:37:13:c1:
23:b6:e7:a6:29:90:07:2c:68:31:b1:14:5f:0d:9f:
5e:91:53:c9:1e:6c:d9:15:72:be:c0:22:4c:96:bb:
cc:b9:a7:d5:38:55:21:4e:dd:ac:35:ca:c1:3d:2b:
ab:e6:64:2f:0c:10:14:f1:a9:f9:1a:88:1c:68:bd:
68:c1:45:a8:f2:af:e2:29:28:56:b1:07:f6:14:dc:
67:95:8a:55:c9:66:00:5b:b8:c4:54:f6:4a:8d:2e:
f0:19:a5:1f:df:c6:c1:7e:84:14:69:e6:93:59:34:
85:b1:ff:12:2c:ba:45:ff:ed:92:8b:08:8e:ca:76:
ef:f2:75:de:ac:19:27:27:1c:ea:d3:56:52:0e:ca:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:8E:29:C5:B7:71:50:1F:EB:0D:06:91:8C:4A:CE:41:39:29:C9
X509v3 Authority Key Identifier:
keyid:5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9f:2c:3d:fa:9b:3e:53:36:9e:8d:e9:c5:7f:f2:4a:d9:a0:
df:3b:98:b4:35:a1:d5:03:c5:24:43:ca:12:ca:7c:b5:bc:fc:
17:2e:3a:e7:14:aa:e3:b8:e6:c9:2b:85:16:a5:cb:8b:f1:9c:
6f:ac:07:d9:99:21:8b:da:91:83:f6:cb:2c:c2:57:e2:a4:78:
d2:e1:77:f8:18:71:ed:69:b7:dd:d1:78:77:b1:6f:5e:60:50:
62:c1:e0:3f:57:32:2f:24:43:b7:02:3d:95:52:ca:51:8c:83:
ed:d3:a8:06:b6:26:39:0d:d9:40:44:f9:dd:49:21:36:94:0a:
cd:06:88:f6:f7:99:17:cc:ab:ac:38:af:fb:94:09:66:52:ea:
de:04:81:4c:72:40:a7:c6:ea:aa:31:72:58:6f:d4:dc:b8:8b:
45:a7:97:ce:bb:3c:1c:ed:21:49:07:d2:50:6e:4b:1d:45:d6:
58:73:5f:2c:0f:65:10:23:73:83:87:41:ef:bc:66:a2:9c:77:
13:7c:ab:81:f9:85:2a:2b:ad:9d:44:9b:64:87:2c:ac:ff:6f:
05:27:a5:9b:b8:ea:10:80:9c:3b:75:f5:ef:a8:a7:b0:e5:68:
6f:97:59:49:c1:7a:7b:67:37:84:98:25:17:1c:dd:6b:82:c3:
1a:15:f5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:08 2025 by rpki-client